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TO ALL WHOM IT MAY CONCERN: 

Be it known that we, Michael J. Grier a citizen of the 
United States, residing at 18215 159th Avenue NE, Woodinville, 
Washington 98072, Sanjay G. Shenoy, a citizen of India, 
residing at 9336 132nd Avenue NE, Redmond, Washington 98052, 
RoseMarie FitzSimons, a citizen of Ireland, residing at 408 N 
39th Street, Seattle, Washington 98103, David D'Souza, a 
citizen of the United States, residing at 7201 Holly Hill 
Drive, Mercer Island, Washington 98040, Srivatsan 
Parthasarathy, a citizen of India, residing at 17745 SE 58th 
Place, Bellevue, Washington 98006, Micheal Dunn, a citizen of 
the United States, residing at 6355 137th Ave NE #297, Redmond, 
Washington 98052, and Alan Shi, a citizen of Canada, residing 
at 9409 178th Place NE #2, Redmond, Washington, 98052 have 
invented a certain new and useful CONFIGURATIONS FOR BINDING 
SOFTWARE ASSEMBLIES TO APPLICATION PROGRAMS of which the 
following is a specification. 



CONFIGURATIONS FOR BINDING SOFTWARE ASSEMBLIES 
TO APPLICATION PROGRAMS 

CROSS-REFERENCE TO RELATED APPLICATIONS 

The present application claims priority to United States 
Provisional Patent Application Serial No. 60/199^227, filed 
April 24, 2000, and is also related to copending United States 
Patent Application entitled ^'Isolating Assembly Versions for 
Binding to Application Programs'' filed concurrently herewith. 

FIELD OF THE INVENTION 

The present invention is generally directed to computer 
systems, and more particularly to executable computer code such 
as application programs that utilize shared assemblies. 

BACKGROUND OF THE INVENTION 

At one time, computer applications were monolithic blocks 
of executable code and data, although some of their data such 
as variable settings could be maintained in separate files. 
This made tasks like moving or replacing the application 
simple. In contrast, contemporary computer applications and 
other executable code (such as an operating system component) 
bind to and make use of shared components, wherein in general a 
component is a self-contained software entity, offering a set 
of functions that can be used by a variety of applications. 
Such components include dynamic link libraries (DLLs) and 



objects such as OLE (Object Linking and Embedding) components 
and COM (Component Object Model) components, including ActiveX® 
controls. In turn, some of these shared components depend on 
other shared components. 
5 On any given machine, at present there is one version of 

each of these components shared by applications, such as the 
most-recently installed version, although some mechanisms are 
known that replace an installed component only when an 
available replacement component has a higher version number. 

10 The metadata maintained for using these components is generally 
maintained in the system registry, and the application has the 
names of the needed components compiled into its binary code. 
Because in general the application does not change as 
components change, to function properly, global component 

15 sharing requires that any shared component function exactly 

like previous other versions of that component with respect to 
what an application expects. In practice, however, perfect 
backwards compatibility is difficult if not impossible to 
achieve, among other reasons because it is impractical to test 

20 the many configurations in which the shared component may be 
used. For example, both newer and older applications end up 
sharing the same component, whereby over time, fixing and 
improving the component becomes increasingly difficult. 
Moreover, the practical functionality of a component is not 

25 easily defined. For example, some applications may utilize 
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unintended side effects in a component that are not considered 
part of the core function of the component, e.g., an 
application may become dependent on a bug in a component, and 
when the component publisher chooses to fix that bug, the 

5 application fails. Of course, on the other side, application 
writers cannot test future versions of components. 

As a result, problems occur when a component is updated to 
its newer version, such as when a new application or operating 
system service pack is installed with updated copies of 

10 components, as the newly installed component versions become 
the ones used by other applications and components on the 
system. The sheer volume of applications and components that 
rely on other components magnifies this problem, which is 
sometimes referred to as ''DLL Hell." 

15 One mechanism that provided sharing for some applications 

while enhancing the stability of other applications was 
provided in Microsoft Corporation's Windows® 2000 and Windows® 
98, Second Edition, operating systems. In general, this 
mechanism provided a way for an application to be bound to a 

20 local copy of a component instead of a shared copy. However, 
with this solution, a component needed to be isolated per 
application, which resulted in multiple copies of the same 
component version having to be maintained on the system. 
Additionally COM data was not isolated, limiting this 

25 mechanism's usefulness with COM objects. 
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At the same time, even if it was possible to permanently 
bind an application to one version of a shared component, it is 
not always desirable to do so* For example, a critical 
security fix may be made to a component, but if an existing 
5 application were permanently bound to an earlier version of 
that component, the application would not be protected by the 
security fix. In sum, the existing models for sharing 
components have many problems and shortcomings, 

10 SUMMARY OF THE INVENTION 

Briefly, the present invention provides a method, system 
and infrastructure that allow an application to run with 
specified versions of components bound thereto, while allowing 
the application author and/or component publisher to change the 

15 version as desired* In an alternative mode, an administrator 
may also have input (e.g., the final decision) as to specifying 
the version to be used. A component is often packaged with 
other components as an assembly, wherein an assembly is set of 
one or more component files that are versioned and ship as a 

20 unit, and thus as used herein a set of one or more components 
are also referred to as an assembly, and a component publisher 
an assembly publisher. 

Each assembly may exist and run side-by-side on the system 
with other versions of the same assembly being used by other 

25 applications. To this end, the application provides an 



- 4 - 



application manifest to specify any desired assembly versions. 
The application author may also provide (e.g*, at a later time) 
an application configuration that overrides the binding 
information in the application manifest. The present invention 
5 also allows an assembly publisher to provide a publisher 

configuration that may similarly control which assembly version 
will be used. In a first alternative mode, the application 
configuration (when present) is applied after any publisher 
configuration is applied and thus overrides the publisher 

10 configuration's binding information. In a second alternative 
mode, the order of applying the configurations is reversed, 
whereby the publisher configuration may change the application 
configuration's binding override information. In this second 
alternative mode, the application configuration may have a 

15 setting therein that bypasses the publisher configuration, in a 
''safe" mode of operation. Lastly, (preferably also in this 
second alternative mode), an adiainistrator configuration may be 
present that is capable of overriding the other configuration 
version binding information. Some or all of the various 

20 configuration data structures (e.g., the publisher 

configurations) themselves may wrapped as assemblies, thereby 
benefiting from the characteristics of assemblies, including 
versioning of configurations, strong naming of configurations, 
and so on. 
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In this manner, the present invention enables applications 
to explicitly use different versions of assemblies from what 
the application as originally shipped had specified. This 
allows for exact management and control of assemblies during 
5 the lifecycle of the application. To determine the correct 
version, at runtime, in the first mode, the present invention 
first interprets the application manifest (e.g., released with 
the application) , followed by a publisher configuration, if 
present, that may redirect (re-map) any assembly versions 

10 specified in the application manifest to other assembly 

versions. Then, if an application configuration is present, 
the application configuration is interpreted to redirect some 
or all of the current binding information, e.g., for the 
current assembly version to another assembly version, as 

15 specified therein. 

In the second alternative mode, the present invention 
first interprets the application manifest (e.g., released with 
the application) , followed by the application configuration, if 
present, that may redirect (re-map) any versions specified in 

20 the application manifest to other versions. Then, if a 
publisher configuration is present, and the application 
configuration does not bypass the publisher configuration via a 
special safe mode, the publisher configuration is interpreted 
to (possibly) redirect the current binding information, e.g., 

25 for that assembly version to another assembly version, as 
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specified therein. Lastly, any administrator configuration is 
interpreted to (possibly again) change the bindings to assembly 
versions . 

For efficiency, the present invention may build tables in 
5 an activation context in a pre-execution initialization phase 
to maintain the version mapping information, rather than 
interpreting the manifest and any configurations each time an 
assembly is needed, (i.e., per-request file mapping including 
adjusting for configurations is straightforward to implement, 

10 but less efficient) . The activation context tables provide 
fast mapping from assembly names provided by the application, 
including version-independent names, to the correct versions as 
specified in the manifest (normally fully-named assemblies) and 
altered by any configurations. Once built, the tables may be 

15 cached, e.g., such as in the first alternative mode for the 
time that the application instance runs (lifetime of the 
process) , whereby the information therein is available as 
needed. In an alternative mode such as the second alternative 
mode, the tables or other binding data may be dynamically 

20 recalculated. 

To use the tables, in the pre-application execution phase 
when creating a new process, the operating system checks for an 
application manifest in same file system directory as the 
calling executable. In the first alternative mode, when an 

25 application manifest exists, the operating system checks for an 
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activation context for the application that was built from the 
manifest and configurations. If the activation context does 
not exist (for example this is the first time application has 
been executed) , or it exists but is not coherent with current 
5 configuration, a new activation context is created via the 
application manifest and configurations. 

At runtime, when a program requests creation of a global 
object, the operating system automatically consults the 
activation context built from the application and 

10 configurations to locate and load the appropriate assembly 

version. The operating system also maps any uses of this named 
object to the appropriate version to allow for multiple 
versions of the code module to run simultaneously without 
interfering with each other. By the activation context built 

15 from the application manifest and the configurations, an 
application may be efficiently bound to specific assembly 
versions and thereby be isolated from assembly version changes. 
At the same time, changes to the bindings are enabled via the 
configurations . 

20 Other objects and advantages will become apparent from the 

following detailed description when taken in conjunction with 
the drawings, in which: 
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BRIEF DESCRIPTION OF THE DRAWINGS 

FIGURE 1 is a block diagram representing a computer system 
into which the present invention may be incorporated; 

FIGS. 2A and 2B are block diagrams generally representing 
5 alternative modes, respectively, for binding applications to 
assemblies, including manifests and configurations that are 
used to specify assembly version bindings in accordance with 
aspects of the present invention; 

FIGS. 3A and 3B are block diagrams generally representing 
10 manifests and configurations for binding an application to a 
specified asseinbly version in alternative modes, respectively, 
in accordance with aspects of the present invention; 

FIG. 4 is an example of information maintained within an 
activation context in accordance with an aspect of the present 
15 invention; 

FIG. 5 is a block diagram generally representing various 
assemblies for utilizing an activation context at runtime to 
locate and load a particular version of a requested assembly 
version in accordance with an aspect of the present invention; 
20 FIGS. 6-7 comprise a flow diagram representing general 

steps taken to initialize an activation context in a first 
alternative mode based on manifests and configurations in 
accordance with an aspect of the present invention; 
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FIG* 8 is a representation of a dependency graph useful in 
constructing the activation context in accordance with an 
aspect of the present invention; 

FIG. 9 is a flow diagram representing general steps taken 
5 to utilize an activation context during runtime in accordance 
with an aspect of the present invention; and 

FIGS. 10-11 comprise a flow diagram representing general 
steps taken to determine assembly versions in a second 
alternative mode based on manifests and configurations in 
10 accordance with an aspect of the present invention; 



DETAILED DESCRIPTION 

EXEMPLARY OPERATING ENVIRONMENT 

FIGURE 1 illustrates an example of a suitable computing 

15 system environment 100 on which the invention may be 

implemented. The computing system environment 100 is only one 
example of a suitable computing environment and is not intended 
to suggest any limitation as to the scope of use or 
functionality of the invention. Neither should the computing 

20 environment 100 be interpreted as having any dependency or 

requirement relating to any one or combination of components 
illustrated in the exemplary operating environment 100. 

The invention is operational with numerous other general 
purpose or special purpose computing system environments or 

25 configurations. Examples of well known computing systems, 
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environments, and/or configurations that may be suitable for 
use with the invention include, but are not limited to, 
personal computers, server computers, hand-held or laptop 
devices, multiprocessor systems, microprocessor-based systems, 
5 set top boxes, programmable consumer electronics, network PCs, 
minicomputers, mainframe computers, distributed computing 
environments that include any of the above systems or devices, 
and the like. 

The invention may be described in the general context of 

10 computer-executable instructions, such as program modules, 
being executed by a computer. Generally, program modules 
include routines, programs, objects, components, data 
structures, and so forth, that perform particular tasks or 
implement particular abstract data types. The invention may 

15 also be practiced in distributed computing environments where 
tasks are performed by remote processing devices that are 
linked through a communications network. In a distributed 
computing environment, program modules may be located in both 
local and remote computer storage media including memory 

20 storage devices. 

With reference to FIG. 1, an exemplary system for 
implementing the invention includes a general purpose computing 
device in the form of a computer 110. Components of the 
computer 110 may include, but are not limited to, a processing 

25 unit 120, a system memory 130, and a system bus 121 that 
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couples various system components including the system memory 
to the processing unit 120. The system bus 121 may be any of 
several types of bus structures including a memory bus or 
memory controller, a peripheral bus, and a local bus using any 
5 of a variety of bus architectures. By way of example, and not 
limitation, such architectures include Industry Standard 
Architecture (ISA) bus, Micro Channel Architecture (MCA) bus. 
Enhanced ISA (EISA) bus. Video Electronics Standards 
Association (VESA) local bus, and Peripheral Component 
10 Interconnect (PCI) bus also known as Mezzanine bus. 

The computer 110 typically includes a variety of computer- 
readable media. Computer-readable media can be any available 
media that can be accessed by the computer 110 and includes 
both volatile and nonvolatile media, and removable and non- 
15 removable media. By way of example, and not limitation, 

computer-readable media may comprise computer storage media and 
communication media. Computer storage media includes both 
volatile and nonvolatile, removable and non-removable media 
implemented in any method or technology for storage of 
20 information such as computer-readable instructions, data 

structures, program modules or other data. Computer storage 
media includes, but is not limited to, RAM, ROM, EEPROM, flash 
memory or other memory technology, CD-ROM, digital versatile 
disks (DVD) or other optical disk storage, magnetic cassettes, 
25 magnetic tape, magnetic disk storage or other magnetic storage 
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devices, or any other medium which can be used to store the 
desired information and which can accessed by the computer 110. 
Communication media typically embodies computer-readable 
instructions, data structures, program modules or other data in 
5 a modulated data signal such as a carrier wave or other 
transport mechanism and includes any information delivery 
media. The term '"modulated data signal" means a signal that 
has one or more of its characteristics set or changed in such a 
manner as to encode information in the signal. By way of 
10 example, and not limitation, communication media includes wired 
media such as a wired network or direct-wired connection, and 
wireless media such as acoustic, RF, infrared and other 
wireless media. Combinations of the any of the above should 
also be included within the scope of computer-readable media. 
15 The system memory 130 includes computer storage media in 

the form of volatile and/or nonvolatile memory such as read 
only memory (ROM) 131 and random access memory (RAM) 132. A 
basic input/output system 133 (BIOS), containing the basic 
routines that help to transfer information between elements 
20 within computer 110, such as during start-up, is typically 
stored in ROM 131. RAM 132 typically contains data and/or 
program modules that are immediately accessible to and/or 
presently being operated on by processing unit 120. By way of 
example, and not limitation, FIG. 1 illustrates operating 
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system 134, application programs 135, other program modules 136 
and program data 137. 

The computer 110 may also include other removable/non- 
removable, volatile/nonvolatile computer storage media* By way 
5 of example only, FIG. 1 illustrates a hard disk drive 140 that 
reads from or writes to non-removable, nonvolatile magnetic 
media, a magnetic disk drive 151 that reads from or writes to a 
removable, nonvolatile magnetic disk 152, and an optical disk 
drive 155 that reads from or writes to a removable, nonvolatile 

10 optical disk 156 such as a CD ROM or other optical media. 

Other removable/non-removable, volatile/nonvolatile computer 
storage media that can be used in the exemplary operating 
environment include, but are not limited to, magnetic tape 
cassettes, flash memory cards, digital versatile disks, digital 

15 video tape, solid state RAM, solid state ROM, and the like. 
The hard disk drive 141 is typically connected to the system 
bus 121 through a non-removable memory interface such as 
interface 140, and magnetic disk drive 151 and optical disk 
drive 155 are typically connected to the system bus 121 by a 

20 removable memory interface, such as interface 150. 

The drives and their associated computer storage media, 
discussed above and illustrated in FIG. 1, provide storage of 
computer-readable instructions, data structures, program 
modules and other data for the computer 110. In FIG. 1, for 

25 example, hard disk drive 141 is illustrated as storing 
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operating system 144, application programs 145, other program 
modules 14 6 and program data 147. Note that these components 
can either be the same as or different from operating system 
134, application programs 135, other program modules 136, and 
5 program data 137. Operating system 144, application programs 
145, other program modules 14 6, and program data 147 are given 
different numbers herein to illustrate that, at a minimum, they 
are different copies. A user may enter commands and 
information into the computer 20 through input devices such as 

10 a keyboard 162 and pointing device 161, commonly referred to as 
a mouse, trackball or touch pad. Other input devices (not 
shown) may include a microphone, joystick, game pad, satellite 
dish, scanner, or the like. These and other input devices are 
often connected to the processing unit 120 through a user input 

15 interface 160 that is coupled to the system bus, but may be 
connected by other interface and bus structures, such as a 
parallel port, game port or a universal serial bus (USB) . A 
monitor 191 or other type of display device is also connected 
to the system bus 121 via an interface, such as a video 

20 interface 190. In addition to the monitor, computers may also 
include other peripheral output devices such as speakers 197 
and printer 196, which may be connected through an output 
peripheral interface 190. 

The computer 110 may operate in a networked environment 

25 using logical connections to one or more remote computers, such 
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as a remote computer 180* The remote computer 180 may be a 
personal computer, a server, a router, a network PC, a peer 
device or other common network node, and typically includes 
many or all of the elements described above relative to the 
5 computer 110, although only a memory storage device 181 has 
been illustrated in FIG. 1- The logical connections depicted 
in FIG. 1 include a local area network (LAN) 171 and a wide 
area network (WAN) 173, but may also include other networks. 
Such networking environments are commonplace in offices, 

10 enterprise-wide computer networks, intranets and the Internet. 
When used in a LAN networking environment, the computer 110 is 
connected to the LAN 171 through a network interface or adapter 
17 0. When used in a WAN networking environment, the computer 
110 typically includes a modem 172 or other means for 

15 establishing communications over the WAN 173, such as the 

Internet. The modem 172, which may be internal or external, 
may be connected to the system bus 121 via the user input 
interface 160 or other appropriate mechanism. In a networked 
environment, program modules depicted relative to the computer 

20 110, or portions thereof, may be stored in the remote memory 

storage device. By way of example, and not limitation, FIG. 1 
illustrates remote application programs 185 as residing on 
memory device 181. It will be appreciated that the network 
connections shown are exemplary and other means of establishing 

25 a communications link between the computers may be used. 
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ISOLATING AND BINDING ASSEMBLY VERSIONS 

The present invention is generally directed to binding 
application programs to configuration (also referred to as 
5 policy) determined, isolated versions of components, (including 
code and/or data) , per-application program or the like, in a 
manner that allows multiple versions of the same component to 
exist and operate side-by-side on a system. For practical 
purposes, components are often collected into an assembly, 

10 which, when referring to items such as a component, is the 

lowest unit of storage packaged for activation, distribution 
and versioning. Rather than deal with individual components, 
of which there may be a relatively large number, many of the 
actions regarding components that are grouped together can be 

15 handled by referring to their assembly. For example, rather 
than list in the manifest 204 the dependencies on a large 
number of individual components that are packaged together in a 
component assembly, the manifest may simply list a dependency 
on the assembly. As used herein, the term "'assembly" will 

2 0 refer to one or more components, whether referring to a single 
component (e.g., one contiguous DLL) or to a plurality of 
components grouped together. 

Assemblies can be shared, such as when more than one 
application or the like needs an instance of the assembly's 

25 code. To provide significant flexibility while being 
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transparent to existing and newly-developed applications, the 
present invention has been implemented in an operating system, 
with applications being run via the operating system. As will 
be understood/ however, the present invention is not limited to 
5 applications and/or an operating system implementation, but 
rather is capable of being implemented by virtually any 
mechanism internal or external to executable code (e.g., an 
application) that needs or wants to use a specific version of 
an assembly. Note that as used herein, an application program 

10 is not limited to any particular type of software product, but 
includes any executable code such as operating system 
components, drivers and so on that in turn use other 
assemblies. Notwithstanding, the present invention will be 
primarily described with an application that uses assemblies 

15 such as DLLs and objects. 

FIG. 2A shows an application program 200 maintained, for 
example, as an executable file in a file system folder 202 in a 
non-volatile storage (e.g., hard disk drive 141) of the 
computer system 100 (FIG. 1) . To identify specific versions of 

20 one or all of the specific assemblies that the application 

prefers to use, an application such as the application 200 of 
FIG. 2A is associated with an application manifest 204. For 
example, one way in which an application may be associated with 
a manifest is to store the manifest in the same folder 202 with 

25 the application executable, named with the same filenames but 
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with different file extensions (e.g., '".exe" versus 
''.manifest"). Alternatively, the application manifest 204 may 
be compiled into the application's binary code / data, as long 
as it can be easily accessed. Note that other applications 
5 (typically in different folders) may or may not have 
application manifests associated therewith. 

In general, an application manifest is an XML (extensible 
Markup Language) formatted file or other suitable file that 
comprises metadata (e.g., 206) describing an application's 

10 dependencies on shareable assembly versions, (sometimes 

referred to as side-by-side assemblies), and also includes 
metadata to describe any privatized assemblies (described 
below) . For example, the application manifest 204 specifies in 
its dependency data 206 a dependency on a particular version 

15 (e.g., vl. 0.0.0) of a shared assembly, assemblyx 208i, as 

represented in FIG. 2A by the arrow between blocks 206 and 
208i. Note that the application manifest 204 may also specify 
dependencies on other assemblies. Further, note that other 
data structures including a configuration, (described below) , 

20 which are not ordinarily considered side-by-side assemblies, 
each may be wrapped as an assembly to thereby obtain the 
benefits that an assembly may have, such as versioning, naming 
and so forth. The wrapping of a configuration as an assembly 
including associated version information is generally 

25 represented in FIG. 2A by the box labeled ''Configuration 
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Version Data'' accompanying the publisher configuration 220 in 
FIGS 2A and 2B. 

Two types of assemblies are possible, those having strong 
names, e*g., including a public key signature or the like such 
5 that any two different assemblies can be unambiguously 
identified, and those having a simple name, which may be 
ambiguous in the system, and, for example, do not contain a 
public key. To provide isolation, any simply-named assemblies 
on which an application manifest specifies a dependency are 

10 treated as privatized assext±)lies 210 of FIG. 2A, (wherein the 

dashed box represents that the privatized assemblies may or may 
not be present for a given application) . Privatized assemblies 
are those that the application does not intend to be shared 
with other applications. Privatized assemblies that have 

15 simple names are normally installed into the same folder as the 
executable application code, whereby the assembly is isolated 
and the application is given the effect of being monolithic, 
e.g., its assemblies are not influenced by different assemblies 
having the same simple name, and so forth. By not being 

20 shared, privatized assemblies with simple names thus have the 
benefit of virtually complete isolation, at the expense of the 
benefits obtained by sharing. Assemblies having strong names 
do not need to be placed into the application folder for 
isolation purposes, because assemblies with strong names are 

25 known to be the exact one the application needs. Thus, instead 
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of being privatized by storing in a certain directory, such 
assemblies may be placed into a global assembly cache 212 to 
obtain the benefits of sharing, while effectively preserving 
isolation, because an application that asks for a strongly 
5 named assembly will get a copy that is exact (subject to 
configuration overrides, as described below) . 

The application, manifest and assemblies, both privatized 
and global, are installed to their appropriate file system 
locations at the time the application or assembly is installed. 

10 In general, the application, application manifest and 

privatized assemblies (those not strongly named) are copied to 
the application folder, while strongly named assemblies may be 
copied to the global assembly cache 212 (e.g., one or more 
folders) . Note that to provide side-by-side existence of 

15 assembly versions, any existing assembly versions are not 

overwritten in the assembly cache 212 when another version is 
installed, (although a version can be removed by other means, 
at the risk of breaking an application that depends on that 
version) . The assembly cache can be hidden and/or access 

20 controlled to prevent assemblies from being easily removed. 

The installation and general usage of manifests and assemblies 
are further described in the aforementioned United States 
Patent Application entitled ^""Isolating Assembly Versions for 
Binding to Application Programs." 
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Example manifests in XML format are set forth in the 
tables below, wherein TABLEl is an example of a simple 
application manifest where the application depends on a side- 
by-side version of COMCTL32: 

5 TABLEl 

<?xml version="l . 0" encoding="UTF-8" standalone^"yes"?> 
<assembly xmlns="urn: schemas-microsoft~com:asm. vl " 
manifestVersion="l . 0"> 
<assembly Identity 

version="l .0.0.0" 

processorArchitecture="X86" 

name= "Mi crosof t . Windows . mysampl eApp " 

type=" Win32" 

/> 

<description>Your app description here</description> 
<dependency> 

<dependen tAs s embly> 
<asseinbly Identity 
type="win32 " 

name="Microsoft. Windows. Common-Controls" 

version="6, 0.0.0" 

process or Arch itecture^ "X8 6 " 

puhl i cKeyToken= " 659 5h 6414 4ccfl df " 

language^" '^" 

/> 

</ dependent As sembly> 
</ dependency> 

</assembly> 



TABLE2 is an example of an application manifest where the 
application depends on a side-by-side version of COMCTL32 and 
an assembly is privatized to the application: 

10 TABLE2 

<?xml version="l . 0" encoding="UTF-8" standalone="yes"?> 
<assembly xmlns'=="urn: schemas-microsoft~com: asm. vl " 
manifestVersion^"l . 0"> 
<assemblyldenti ty 

version="l. 0. 0. 0" 
pro ces s or Arch itecture=^ "X8 6 " 
name= "Mi crosof t . Wi ndows . mysampl eApp " 
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type= "Win32 " 

/> 

<description>Your app description here</description> 
<dependency> 

<dependen tAs s enibly> 
<assemblyldenti ty 
type="win32 " 

name=="Microsoft. Windows, Common-Controls" 

version="6. 0. 0. 0" 

process or Arch itecture="X86" 

p ubl i cKey Tokens " 6595b 64144ccfl df " 

language^"'*'" 

/> 

</ dependent As sembly> 
</dependency> 
<! — Privatized assembly 
<file name="mypaint. dll"> 

<comClass description="Font Property Page" 
clsid==="{0BE35200~8F91'~llCE-9DE3-00AA004BB851 } "/> 

<comClass description^" Color Property Page" 
clsid=="{0BE35201-8F91~llCE~9DE3-00AA004BB851 } "/> 

<comClass description^" Picture Property Page" 
clsid^" { 0BE35202-8F91-11CE-9DE3-00AA004BB851 } "/> 
</file> 

<file name="mydraw.dll"/> 

<file name^"testctl32.dll"> 

<wi ndowCl a ss>ToolbarWi ndow32</wi ndowCl ass> 

<windowClass>ComboBoKEx32</windowClass> 

<windowClass>testctls_trackbar32</windowClass> 

<windowClass>testctls__updown32</windowClass> 

<windowClass>testctls_progress32</windowClass> 

</file> 

<file 

name="new\SxS_COM. dll "> 

<comClass 

description=-"SxSTestObject Class" 
clsid="{F3B09421''5A10~4756-98AF~7A447E07D3C2}" 
threadingModel=" Apartment " 

tlbid="{B21101B9-90DF-4841'BEAC-41F68CD94BDC} " 

progid="SxS_COM. SxS_COMObject . 1 "> 
<progid>"SxS_COM. SxS_COMObject "</progid> 
</comClass> 
<interface 

iid=" {D8C178A3-F275-4EAB-B6F4-896B5B9A0FC0} " 
name^" ISxSTestObj ect " 

proxystubclsid=" { 00020424-0000-0000-C000~ 
000000000046} " 
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proxy s t ubcl si d32= 


■"{00020424-0000-0000-COOO- 


000000000046} " 




tlbid="{B21101B9- 


90DF-4841 -BEAC-41F68CD94BDC} "/> 


<typelib 




tlbid="{B21101B9- 


90DF-4841-BEAC-41F68CD94BDC} " 


version="l . 0" 




description="SxS_ 


COM 1.0 Type Library" 


helpdi r= "new "/> 




</file> 




</assembly> 





Assemblies may be dependent on other assemblies^ which in 
turn are dependent on other assemblies, and so on. To ensure 
the proper versions of dependent assemblies, one or more of the 
5 assemblies (e.g., assembly 208i) each have an assembly manifest 
(e.g., 214i) associated therewith that specifies its 
corresponding assembly's dependencies. To this end, assembly 
authors that create a side-by-side assembly may also author an 
assembly manifest, which is copied to the assembly cache 212 

10 with the corresponding assembly at the time of installation, 
whereby that assembly manifest will be interpreted for proper 
version dependencies. Note that although not directly 
identified in FIG. 2A, it is understood that assemblies x 2O82- 
2O84 and any other assemblies in the assembly cache 212 each 

15 may have an assembly manifest associated therewith, (shown in 
FIG. 2A as a set 215 of other assembly manifests) . 

Each assembly manifest describes the assembly and includes 
information about its individual assemblies, including, for 
example, the name and version of the assembly, the items 

20 (program files, resources) that make up the assembly, and the 
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binding path to items within the assembly (e.g., for Win32 DLLs 
this is the location of the DLL relative to the root of the 
assembly, whereas for COM Servers this is the CLSID (class 
identifier) , ProgID (programmatic identifier) and other COM 
metadata) . The assembly manifest may also include any 
dependencies on other assemblies, object classes and global 
names . 

A sample assembly manifest is set forth in TABLES below: 

TABLE 3 

<?xml version="l .0" encoding="UTF-8" standalone="yes"?> 
<assembly xmlns="urn: schemas-microsoft-com: asm. vl " 
manifestVersion="l . (?"> 

<assemblyldentity type="win32" 
name= "Mi crosof t. Tools. Visual CPl usPl us . Runtime -Librari es " 
version="6. 0. 0. 0" processorArchitecture="x86" 
p uhl i cKeyTok en="6595b64144ccfldf"/> 

<file name="mf c42u.dll" 
hash="3eab067f82504bf271ed38112a4ccdf46094eb5a" 
hashalg="SHAl "> 

<comClass description="Font Property Page" 
clsid="{0BE35200-8F91-llCE-9DE3-00AA004BB851}"/> 

<comClass description="Color Property Page" 
Clsid=" (0BE35201 -8F91 -11CE-9DE3-00AA004BB851 } "/> 

<comClass description=" Picture Property Page" 
clsid="{0BE35202-8F91-llCE-9DE3-00AA004BB851}"/> 
</file> 

<fi 1 e name= "mfc 42.dll" 
hash="ac72753e5bb20446d88a48c8f0aaae769a962338" 
hashalg="SHAl"/> 

<file name="atl.dll" 
hash="a7312alf6cfb46433001e0540458de60adcd5ec5" 
hashalg^"SHAl"> 

<comClass description="Registrar Class" 
clsid=" {44ECO53A-400F-11D0-9DCD-00A0C90391D3} " 
progid="ATL. Registrar" /> 

<interface iid==" {B6EA2051 -048A-11D1 -82B9- 
00C04FB9942E} " name="IAxWinAmbientDispatch" 

proxyStubClsId32=" {00020424-0000-0000-C000-000000000046} "/> 

<typelib tlbid=" { 44EC0535-400F-11D0-9DCD- 
00A0C90391D3}" version="l . 0" helpdir=""/> 

</file> 
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<file name=^ "msvcrt.dll" 
hash^"ba62960cebl5073d2598379307aad84f3a73dfcb" 
hashalg="SHAl V> 

<file name= "msvcirt.dll" 
hash^"84eb92153ff379c67c2727cc7f6931e011ff8121'' 
hashalg="SHAl "/> 

<file name= "msvcp60.dll" 
hash--"96952787al676e38107ab93c6a33b9bcdalc912e" 
hashalg^"SHAl'V> 

</assembly> 

Although the application manifest 204 lists its 
dependencies on assembly versions, it should be noted that 
technically, the application 200 is only dependent on the 
5 manifest-specified assemblies themselves, not necessarily the 
exact versions that are specified. Instead, the specified 
versions are only those tested with the application and known 
to work. 

In accordance with one aspect of the present invention, 
10 the operating system (e.g., including an assembly loading 
mechanism) can bind the application to another version of a 
needed assembly in place of one specified in the application 
manifest 204. To this end, configuration information that is 
separate from the shared assembly may be interpreted to 
15 determine which version to bind. Note that a configuration is 
separate from the shared assembly or assemblies to which it 
refers, for example, in that it is a separable entity 
therefrom, normally contained as a file, that can be added to 
or removed from a system at a later time, and so on. 
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In a first alternative mode, as shown in FIG. 2A, an 
assembly publisher can issue a publisher configuration 220 with 
data 222 therein that redirects a requested assembly version 
(e.g., requested via the manifest or the application 
5 configuration) to one that is specified by the assembly 

publisher. In general, a publisher configuration file applies 
to a single assembly, although a single assembly may have 
multiple associated publisher configuration files. Note that a 
publisher configuration applies to any application in the 

10 system that uses the corresponding assembly. 

The publisher configuration enables an assembly publisher 
to effectively replace one assembly version with another 
version, such as when a service pack is installed. As 
described herein, in a first alternative mode, the assembly 

15 publisher configuration is interpreted after the manifest is 
interpreted, and thus can change an assembly initially 
specified by the application author. For example, in FIG. 2A, 
the publisher configuration 220 may include data that redirects 
the binding specified in the manifest (version 1.0.0.0) to 

20 version 2.0.0.0 (shared assemblyx 2O82) . 

As also represented in FIG. 2A, an application 
configuration 216 including updated assembly version dependency 
data 218 may be stored in the application folder 202 to 
similarly override some or all of the information in the 

25 application manifest 206 and/or any modification by the 



" 27 - 



publisher configuration 220 • For example, as represented in 
FIG. 2A, the application configuration 218 may include data 
(e.g., an instruction) that redirects the current binding from 
version 2.0.0,0 to version 3.0*0.0 (the shared assemblyx 2O83) / 
5 e.g., redirect version 2.0.0.0 to version 3.0.0.0. In this 

manner, an application author can effectively update a manifest 
and/or override a publisher configuration by distributing such 
a configuration 216, without having to actually make changes to 
the application manifest 204 or have a new one reinstalled. 

10 Note that other instructions directed to other dependent 

assemblies may be in the same configuration, and that there may 
not be any relevant instruction for a given assembly. 

In a second alternative mode, the order of applying 
configurations is modified, and also at least one other 

15 configuration may be applied. More particularly, as shown in 
FIG. 2B, the application configuration 216 including updated 
assembly version dependency data 218 may be stored in the 
application folder 2 02 to override some or all of the 
information in the application manifest 206, and is applied 

20 before the publisher configuration is applied. For example, as 
represented in FIG. 2B by the arrow from block 218 to block 
2O84, the application configuration 218 may include data (e.g., 
an instruction) that redirects the manifest-specified binding 
to version 2.0.0.0 (the shared assemblyx 2O82) , e.g., redirect 

25 version 1.0.0.0 to version 2.0.0.0. In this second alternative 
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mode, an application author can thus similarly effectively 
update a manifest without actually changing the manifest. 

As also represented in FIG. 2B, the assembly publisher can 
similarly issue a publisher configuration 220 with data 222 
5 therein that thereafter redirects the currently requested 
assembly version (in the present example modified by the 
application configuration) to one that is specified by the 
assembly publisher. This mode enables assembly publishers to 
effectively replace selected assemblies with other versions. 

10 In this second alternative mode, because the assembly publisher 
configuration is interpreted after the manifest and/or any 
application configuration is interpreted, the publisher can 
thus change the assembly specified by the application author. 
In the example shown in FIG. 2B, the publisher configuration 

15 220 includes data that redirects the binding to version 4.0.0.0 
(shared assemblyx 2O84) , as shown in FIG. 2B via the arrow from 
block 222 to block 2O83. 

Lastly, in this second mode, an administrator 
configuration 224 and its version data 225 may have the final 

20 decision as to which version of an assembly an application (any 
application on the machine) will be bound. For example, in 
FIG. 2B, the administrator configuration 224 is stored as a 
file in a system folder 228 and includes data 226 that 
redirects the current binding to an earlier version, version 

25 3.0.0.0 (shared assemblyx 2O83) , as shown in FIG. 2B via the 
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arrow from block 226 to block 2O83. As can be understood, the 
administrator configuration 224 allows an administrator or the 
like to bind any system applications to a new assembly, or a 
restore a binding to an older assembly, (e.g., version 4.0.0.0 
5 back to version 3.0.0.0 as shown in FIG. 2B) , and so on, 

regardless of what other configurations may specify. With the 
various configurations, updates to applications via new 
assemblies are possible, but only in a safe, controlled manner, 
with the machine administrator having the final determination. 

10 Although complete compatibility of a shared assembly 

should be thoroughly tested, even the smallest change to a 
shared assembly's code may cause an incompatibility with some 
applications that consume them. In such an event, in the 
second alternative mode wherein the publisher configuration 

15 data can override the application configuration data, the 

application configuration file may specify that ^'safe mode'' 
binding should be applied to the specified assembly. In the 
safe mode, the publisher configuration resolution stage is 
avoided, whereby the application operates with no publisher 

20 configuration overrides. To use the safe mode, the application 
configuration 218 (or other system setting, e.g., set by an 
administrator) can explicitly instruct the operating system to 
bypass the interpretation of the publisher configuration 220, 
whereby the application author (or an administrator) controls 

25 the version that is bound to the application. In FIG. 2B, this 
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is represented by the wide arrow (labeled ''Safe Mode'') from 
block 218 to block 224. Any administrator policy still may 
make the final decision^ however. 

It should be noted that the safe mode bypasses publisher 
5 configuration in the second alternative mode, which may affect 
the version that is used even when the administrator 
configuration includes an instruction related to a version of 
that assembly. By way of an example, as shown in FIG. 2B, 
consider the application configuration specifying the safe 

10 mode. If the administrator configuration includes an 

instruction to change version 4.0.0.0 back to version 3.0.0.0^ 
but no others with respect to this assembly, the change to 
version 3.0.0.0 will not be implemented in the safe mode 
because the application configuration has specified version 

15 2.0.0.0, whereby the administrator configuration will see 
version 2.0.0.0 (and not see version 4.0.0.0) to change it. 
However, if not in the safe mode, the version will be changed 
to 3.0.0.0 because the publisher configuration will have first 
changed the version to 4.0.0.0 as described above, whereby the 

20 administrator configuration instruction for version 4.0.0.0 
will apply and version 3.0.0,0 will be restored. To provide 
flexibility, a configuration instruction can specify a range of 
versions to redirect, e.g., change any version in the range 
from 1.2.3.4 to 5.6.7.8 to version 9.0.0.0. 
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Note that while two alternative modes are primarily 
described herein^ it can be readily appreciated that other such 
modes are feasible • For example, it is feasible to have a 
third alternative mode similar to the first alternative mode 
5 described above wherein a publisher configuration is 

interpreted before an application configuration, but the 
further including an administrator configuration as in the 
second alternative mode. Indeed, the present invention is not 
limited to any particular ordering, number and types of 

10 configurations, and so on, but rather contemplates any such 
combinations and permutations. 

As described above, binding starts with a reference, for 
example, that at least contains the name or other identifier of 
the assembly. A fully-specified assembly reference (e.g., in 

15 the manifest and/or configurations) contains the information 

necessary to disambiguate one assembly from another. Dependent 
assembly references, which are constructed at link time, are 
fully-specified assembly references. However, under some 
circumstances, it may be desirable to provide only a subset of 

20 the assembly identity information, yet still issue a bind. For 
example, a partially-specified assembly reference may be 
missing public key, and/or version fields. 

Because partially-specified references are ambiguous, the 
binding process can employ special logic to locate and bind to 

25 these assemblies. More particularly, a first step to resolving 
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a partial-specified assembly bind is to search for an assembly 
in the application directory that satisfies the specified 
fields in the assembly reference. The application directory is 
probed first, (as opposed to immediately searching for a 
5 matching assembly in the global assembly cache 212), to provide 
an application author/deployer with some control over the 
assembly that is finally retrieved through a partially 
specified bind request. In other words, because the global 
assembly cache 212 is a global install location, which can be 

10 used by all applications, searching the global assembly cache 

212 first may result in an assembly being returned that was not 
intended by the original author/deployer. 

Should the binding process be unable to locate a matching 
assembly in the application directory, a lookup in the global 

15 assembly cache 212 may be performed to attempt to find a 

matching assembly, (e*g. for strongly-named files in the first 
alternative mode) • If a match is not found in the global 
assembly cache 212, the assembly bind may be failed (e.g., in 
the first alternative mode) , or a download can be attempted 

20 (e.g., in the second alternative mode). If a matching assembly 
has been located, the binding process (e.g., the binding / 
initialization mechanism) reads the manifest data for the 
assembly and constructs a new, fully-specified assembly 
reference from this data. Because the assembly reference is 

25 now fully-specified, binding configuration can be applied on 
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this reference, as described above, that is, the bind proceeds 
as if the original assembly reference was fully-specified, with 
the above-described logic used to specify one assembly file 
that, if located, satisfies the bind request. 
5 FIG* 3A generally represents the interpreting of the 

manifest and configurations in the first alternative mode, 
beginning when one (or more) of a set of activation APIs 
(application programming interfaces) 300 are called in response 
to a request to run an application program, e.g., the 

10 application program 200. It should be noted that not every 
assembly used by an application needs to be specified in the 
application manifest, nor does each assembly manifest have to 
specify all of its dependencies. For example, the architecture 
allows for binding to components, as was previously done, so a 

15 component (such component files are not usually referred to as 
assemblies) not specified in a manifest would expect to be 
found through a search path. In addition, it is feasible for 
the architecture to allow a default assembly version to be used 
when a particular version of an assembly is not specified in a 

20 manifest. When more than one version of an assembly is 

available, the default assembly is the most-recent version, 
however it is possible for an administrator or user to set 
(e.g., via interaction with the operating system through a 
dialog box, property sheet or the like) any version as a 

25 default. In this manner, a configuration does not have to 
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concern itself with assemblies whose versions are not to be 
changed • 

Although it is possible to dynamically interpret the 
manifest and/or configurations to locate the appropriate 
5 version of an assembly each time an assembly is requested, 
assemblies are requested frequently, and thus it is more 
efficient to cache the information once. To this end, the 
activation APIs 300 cause an activation context 302 for that 
program 200 to be constructed if a valid one does not already 

10 exist for the application 300, (for example, when the 

application is being run for the first time or the activation 
context 302 exists but its information is invalid) . Once 
created, the activation context 302 is maintained in a 
persistable binary form for caching. In general, there is an 

15 activation context for each application that has an expressed 
assembly dependency, and each activation context includes one 
or more mapping tables preferably hashed for quick lookup. As 
described below, the operating system (a runtime version 
matching mechanism therein) uses the activation context 302 to 

20 determine where to retrieve the version. 

To construct the activation context 302, the activation 
APIs call (or otherwise include) a binding / initialization 
mechanism 304, wherein the call is generally represented in 
FIG. 3A by the arrow accompanied by the circled numeral one 

25 (1) . If a new activation context 302 needs to be constructed. 
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the binding / initialization mechanism 304 reads and interprets 
the application manifest 204 as represented in FIG. 3A by the 
arrows labeled with circled numerals two (2) and three (3) • 
More particularly, as described above, whenever the operating 
5 system (e.g., a binding mechanism therein, including the 

binding / initialization mechanism 304) is asked to perform a 
bind for a shared assembly, the bind client (e.g., an API 
called to load a DLL) is required to provide a reference, which 
describes the requested assembly. The version of the assembly 

10 reference may then be altered by a series of configuration 
resolution stages, as described herein, by which the binding 
mechanism decides which version of the assembly to return to 
the bind client. Configuration resolution allows a reference 
to an assembly constructed at compile/link time to be modified 

15 after the application has been deployed, without re- 
compilation/re-linking of the assemblies involved. 

As represented in FIG. 3A, in the first alternative mode 
described above, the first phase in bind configuration 
resolution is publisher configuration, by the arrows labeled 

20 four (4) and five (5) . In general-, publisher configuration 

allows shared-assembly vendors to make compatibility statements 
between different revisions of their software. These per- 
assembly configuration files are wrapped as strongly-named 
(e.g., COM4-) assemblies, and are installed into the global 

25 assembly cache 212 (FIG. 2A) , e.g., as part of a service-pack- 
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style update. Because publisher configuration assemblies may 
affect all applications on the system, these assemblies should 
be installed separately from application installations, 
otherwise an application may "break" other applications simply 
5 through installation. 

In one implementation, a publisher configuration assembly 
has the same name as the assembly it affects, but with a 
further extension appended to the name, (e.g., '\config") . 
This publisher configuration assembly has a module reference to 

10 an XML configuration file that stores the actual binding 
redirect information. Moreover, because assembly metadata 
contains a hash for the XML configuration file, it is possible 
to validate the integrity of the configuration file. 

A publisher configuration assembly is created by authoring 

15 an XML configuration file (which may have any name) , and using 
an assembly linker tool or the like to create the assembly. 
For example, as set forth below, a publisher configuration 
file, version 1.0.0.0, for an assembly named ''test" is created, 
e.g., having an XML configuration file named 

20 ''test . [major] . [minor] . conf ig" 

where major and minor vary with the version. 
Publisher configuration assemblies normally will be 
obtained directly from the publisher as part of a service-pack 
style update, intended to affect all applications on the 

25 system. Because there is no direct link between the publisher 
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configuration and the applications it affects^ version 
redirects specified by the publisher configuration file may 
contain a codebase to the targeted version in the configuration 
file^ otherwise the operating system will not necessarily be 
5 able to locate the intended files. Another option is to 

install the redirected version of the assembly on the machine • 
Similarly, assemblies targeted by administrator configuration 
can either be installed into the global assembly cache 212, 
advertised to the user, or located through a codebase provided 

10 in the administrator configuration file. 

In this first mode, the second stage of configuration 
resolution, after any publisher configuration is applied, 
comprises resolving any application configuration. As 
represented in FIG, 3A by circled numerals six (6) and seven 

15 (7), if an application configuration exists, the binding / 
initialization mechanism 304 reads and interprets the 
application configuration 216. To this end, before a bind to 
the assembly can proceed, the application configuration file 
(if any) is accessed, and analyzed. For example, the 

2 0 configuration data may be maintained as an application 
configuration file, and accessed via an application base 
("'appbase'') directory (e.g., the folder 202) or other suitable 
directory. A name/value pair in the application context 302 
specifies the name of the configuration file. 



- 38 " 



For example^ in an ^\exe" runtime scenario^ the file is 
named with the same name as the executable, but with a 
".config" extension appended thereto, (e.g., 

'"appname.exe.conf ig") . An application author and/or deployer 
5 may choose to provide such a configuration file, thereby 

specifying version redirects for particular assemblies. For 
example, a configuration file may be written by an application 
author to specify that references to a common shared-assembly, 
whether directly provided by the application, or indirectly 

10 from a dependent assembly's dependency, should use a particular 
version. As another example, once an application deployer is 
confident that the application works with a newer version of a 
shared assembly, the deployer can choose to change the 
application configuration file to automatically use the new 

15 version instead of the version set forth in the application 

manifest. When interpreting the configuration, if a relevant 
binding redirect statement is found in the application 
configuration file, the version of the assembly from the 
original reference is modified accordingly. 

20 Whenever a binding configuration statement is made in a 

configuration file, it is the responsibility of the author of 
the configuration file to ensure that the assembly targeted by 
the redirect can be found. In the case of the application 
configuration file, the application author/deployer may choose 

25 to package the files (e.g., binaries) for the target assembly 
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with the application, or alternatively provide information 
(sometimes referred to as a ''codebase") in the configuration 
file to tell the operating system where the files can be found. 
Another option is to install the redirected version of the 
5 assembly on the machine. Note that for privatized assemblies, 
e.g., in the second alternative mode, by attempting to locate 
the referenced assembly by consistently looking in the 
application directory, an application author may simply copy 
newer privatized assemblies into the application directory, and 

10 know that the newer assemblies will be automatically used by 
the application. 

As generally described above, a second alternative mode is 
provided, in which the order of applying configurations is 
different, a safe mode is available for bypassing publisher 

15 configuration, and an administrator configuration may be 
present and if so is interpreted to override other 
configuration binding data. More particularly, in this second 
mode, the first stage of policy resolution comprises resolving 
any application policy. As represented in FIG. 3B by circled 

20 numerals four (4) and five (5), if an application policy 
exists, a binding mechanism 305 reads and interprets the 
application policy 216. To this end, before a bind to the 
assembly can proceed, the application policy file (if any) is 
accessed, and analyzed. As described above, if not bypassed 

25 via the safe mode, any publisher configuration is next applied. 
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as generally represented in FIG* 3B by the arrows labeled six 
(6) and seven (7) . 

In this second mode, a third stage in the bind 
configuration resolution process is administrator 
5 configuration, represented in FIG. 3B by the arrows labeled 
eight (8) and nine (9) . Administrator configuration is the 
strongest form of configuration, as it makes the final 
determination as to which version will be bound, and cannot be 
bypassed. To provide administrator configuration, the 

10 administrator configuration file 224 (FIG. 2B) , e.g., named 
'"machine.conf ig, " has the same schema as the configuration 
files used in the two previous stages of configuration 
resolution. Administrator configuration affects assembly binds 
that occur to any application on the system. 

15 Once the configurations have been handled for a given 

assembly to which an application wants to bind, only one 
version of that assembly remains. This information may be 
cached in the activation context 302 (the arrow labeled eight 
(8) in FIG. 3A or ten (10) in FIG. 3B) and may be persisted 

20 (e.g., in the first alternative mode) so that it need not be 

computed again, unless and until a configuration change occurs. 
Note that in the second alternative mode, the application 
context is not persisted, although it is feasible to do so. 
By way of example, FIG. 4 represents some of the 

25 information that may be maintained in an activation context. 
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e.g., an activation context 302 constructed for the application 
200i. In FIG. 4, the activation context 302 includes a table 
of contents 400 (e.g., providing offsets to its recordsets) for 
rapid access to the data therein. 
5 For persisted activation contexts, because the 

configurations that may change the dependency information may 
change over time, (e.g., publisher configurations may be 
wrapped as assemblies which can be versioned, new application 
configurations may be downloaded and so on) , in the first 

10 alternative mode the activation context 302 includes a cache 

coherency section 402. The cache coherency section is used to 
detect whether a saved activation context 302 is valid, wherein 
when the activation context 302 is not coherent with current 
configuration, it is recomputed. A section per API that 

15 implements version-specific binding is maintained. 

To map the application's requests to the proper assembly 
versions, the activation context 302 includes a DLL redirector 
section 404 and an object class redirector section 406. The 
DLL redirector section 404 includes a record or the like for 

20 each DLL dependency that includes fields (e.g., 408i and 409i) 
that relate the DLL name used by an application to the exact 
pathname of the version determined following the above- 
described configuration-resolution process. The object class 
redirector section 406 includes a record or the like for each 

25 object class (e.g., Windows® object class) on which an 
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application depends, wherein each record includes fields (e.g-, 
412i, 413i and 414i) that relate the object class name used by 
an application to the DLL file it is in and a version specific 
name. Note that the fields are arranged in a manner that 
5 optimizes lookup, e.g., the application-provided request data 
corresponds to the search key, and the records may be arranged 
in any way (e.g., alphabetically, by frequency, linearly, 
binary or so on) to speed searches. 

Via the activation context, during runtime as described 

10 below, an application's requests for assemblies can be 
efficiently satisfied with the correct version of that 
assembly. If a given assembly is not found in the activation 
context data, the default assembly is used. To summarize, when 
an application first runs, the activation context built from 

15 the manifest data is cached, whereby the global, version- 
independent named objects requested by an application are 
mapped to version-dependent named objects as specified in the 
manifest and redirected by any configurations. As the 
application executes and requests a named object via one of the 

20 activation APIs, the version-independent named objects are 
applied in a version-specific fashion by accessing the 
application context, whereby the application gets the correct 
version. 

FIG. 5 represents the general operation during runtime, 
25 e.g., in the first alternative mode, wherein an application 200 
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requests via one of a set of application APIs (e*g., 300i) a 
version-independent assembly (represented via the arrow labeled 
with circled numeral one (1) ) . Application APIS include those 
directed to loading DLLs, COM server loading, COM interface 
5 proxy stub metadata, type libraries for COM, program 

identifiers for COM, object (e.g., Windows®) classes, kernel 
global objects (e.g., semaphores, mutexes, events, shared 
memory, COM categories), application settings and database 
(registry) connections . 
10 When the application API 300i receive the request, the 

request data (e.g., the application provided name) is passed to 
a runtime version-matching mechanism 500 (the arrow labeled two 
(2)). The runtime version-matching mechanism 500 locates the 
correct activation context 302 (from among a store 502 or the 
15 like of those maintained) for the calling application 200, and 
accesses the records therein to determine the correct version 
of the requested assembly (the arrows labeled three (3) and 
four (4)). Via the tables in the activation context 302, the 
runtime version-matching mechanism 500 will either return 
20 (e.g., as a return parameter, with the arrow labeled five (5)) 
the path and filename of the version-specific assembly, or a 
not-found status or the like (and/or the path and filename of 
the default file) to the activation API that called it, in 
which case the activation API will load the default assembly. 
25 As represented in FIG. 5 by the arrows labeled six (6) through 
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eight (8), the activation API 300i accesses the assembly cache 
212 to load the correct version of the assembly. Note that 
alternatively, the runtime version-matching mechanism 500 may 
access the assembly cache 212 on behalf of the calling API 300i 
5 to obtain and/or load the correct version, which is either the 
one listed in the records or the default version if none was 
found. Further, note that privatized assemblies may be loaded 
from the application directory. In any event, the correct 
assembly version 510 is loaded and the activation API 300i 

10 returns from the call to the application 200, (the arrow 
labeled nine (9)), and the application can use the loaded 
assembly 510 (the arrow labeled ten (10) ) . 

Turning to an explanation of the operation of the present 
invention with particular reference to the flow diagrams of 

15 FIGS, 6-7 and 9, as described above, the mapping of an 

application to a specified version of an assembly or other data 
structures essentially comprises two phases, an initialization 
phase in the first alternative mode (FIGS, 6-7) and a runtime 
phase (FIG. 9) . In general, the initialization phase 

20 constructs the activation context, if needed, that maps 

version-independent assemblies to version-specific assemblies 
based on the dependencies and other instructions provided in 
the various manifests and configurations. Then, during a 
runtime phase, (FIG. 9), the activation context is accessed as 

25 needed to rapidly locate and load the appropriate versions when 
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an application requests an assembly to which it needs to be 
bound . 

FIGS. 6-7 represent example steps that may be taken in the 
first alternative mode during the initialization (pre- 
5 application execution) phase to construct the activation 

context, if needed. When creating a new process, the binding / 
initialization mechanism 304 (e.g., of the operating system) 
checks for an application manifest in same file system 
directory as the calling executable, as represented in FIG. 6 

10 by step 600. If an application manifest does not exist, the 
binding / initialization mechanism 304 handles its absence in 
another manner, (step 602), e.g., the operating system may 
search for it, download it, and/or essentially give the 
application default versions during runtime, such as by first 

15 loading any requested assembly from the application's own 

directory when one is present, and otherwise using the default 
assemblies from the assembly cache. 

When step 600 determines that an application manifest 
exists, the binding / initialization mechanism 304 (FIG. 3) 

20 preferably branches to step 610 to create the activation 

tables. Alternatively, if activation contexts may be preserved 
rather than recomputed each runtime, the binding / 
initialization mechanism 304 may check for an existing 
activation context (e.g., 302) for the application. If an 

25 existing activation context is found, step 604 branches to step 
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606 to validate it, otherwise step 604 branches to step 610, 
Step 606 checks the activation context to determine if it is 
coherent with current configuration, and if so, the existing 
activation context 302 can be used (step 608) and the 
5 initialization process ends. If alternatively the activation 
context 302 is not coherent with current configuration at step 
606, for example, because a more recent configuration has been 
provided to the system, the initialization process continues to 
step 610 to recompute a new activation context 302, 

10 In the event that the initialization process continues to 

step 510 to create the activation context, step 610 represents 
obtaining the binding information from the application 
manifest. Steps 610, 612, 614 and 616 of FIG. 6 are executed, 
along with the steps of FIG. 7, essentially to walk through the 

15 application manifest, configurations and any assembly manifests 
in order to build up a dependency graph, including replacing 
assembly information (e.g., maintained as nodes in the graph) 
according to configurations in the dependency graph and adding 
any new nodes to include the dependencies of any assembly 

20 manifests. 

By way of example, FIG. 7 operates once the application 
manifest has it dependent assemblies added to the dependency 
graph (step 610 of FIG. 6) and a requested assembly version 
(node) therein has been selected (step 612, e.g., via a top- 
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down, left-to-right or other suitable progression) for 
processing. 

At step 700, a test is performed to determine whether the 
assembly has a publisher configuration associated therewith, 
5 e.g., in the global assembly cache. If not, step 700 branches 
ahead to test for an application configuration at step 706, 
described below. If a publisher configuration is found at step 
700, step 700 branches to step 702 wherein the publisher 
configuration is interpreted to determine whether there is an 

10 instruction therein for replacing the assembly version that is 
currently under evaluation, i.e., the one currently selected in 
the dependency graph either as originally specified in the 
manifest. If a replacement instruction is found, step 702 
branches to step 7 04 wherein a dependency graph is altered to 

15 reflect the replacement, otherwise step 702 effectively 
bypasses step 704. By way of example, FIG. 8 shows a 
dependency graph 800 in which a node representing an assembly, 
such as the node Nl, has been replaced by a node N2 . Note that 
a list or other data structure may be used instead of a 

20 dependency graph. 

At step 70 6, a test is performed to determine whether the 
application has an application configuration associated 
therewith, e.g., in the application directory. If an 
application configuration is found at step 706, step 706 

25 branches to step 708 wherein the application configuration is 
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interpreted to determine whether there is an instruction 
therein for replacing the assembly version that is currently 
under evaluation, i.e., currently selected in the dependency 
graph by identification in the manifest or as overridden by the 
5 publisher policy. If such a relevant replacement instruction 
is found, step 7 08 branches to step 710 wherein the dependency 
graph is altered to reflect the replacement. 

At this time, the appropriate assembly version is known, 
as specified in the manifest and as altered via any 

10 configuration instructions, as described above. Step 712 
enumerates any dependencies in the assembly manifest that 
corresponds to this appropriate assembly, e.g., to add 
dependent nodes to the dependency graph. Note that if an 
assembly representation (node) is already in the graph for a 

15 given assembly, a pointer from the node may be added to show 
the dependency rather than place a new node in the dependency 
graph. Step 714 marks the current node representing the 
assembly as having been handled, and the process returns to 
step 614 of FIG. 6 to select (step 614) and evaluate any other 

20 nodes in the graph that have not yet been handled, until none 

remain. Once the dependency graph is complete at step 614, the 
data in the dependency graph is used to construct the 
activation context 302, e.g., essentially by filling in the 
tables' fields with the correct version information for each 

25 assembly present in the graph. When constructed, the 
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activation context is copied to the child process in the 
operating system data structure's defined environment process, 
making it the process default. 

Note that to avoid problems, each configuration resolution 
5 stage is only evaluated once. For example, if a subsequent 

version redirect occurs as a result of any later configuration 
resolutions, the previous stages are not re-consulted to re- 
apply configuration. Re-applying configuration after other 
forms of configuration are applied may result in circular / 

10 infinite configuration redirects, and add unnecessary 

complexity to the binding process. Notwithstanding, in an 
alternative implementation, the process may, for example, loop 
back to handle a situation in which a replacement assembly may 
have another configuration associated therewith that can cause 

15 replacement of the currently selected assembly, and so on. 
Note that other safeguards against an infinite loop may be 
implemented to prevent a situation wherein versions have 
circular dependencies. 

FIG. 9 shows the general steps taken to locate and load 

20 the correct version at runtime, e.g., when a program at runtime 
creates a global object, the system automatically gives it a 
version-specific named object by consulting the activation 
context 302 built from the manifest as altered by any 
configurations. Note that FIG. 9 is intentionally streamlined 

25 for efficiency, i.e., the activation context is built in 



- 50 - 



advance, so that during runtime an efficient and rapid lookup 
can be performed to find the appropriate version. 

Beginning at step 900 the activation API receives the 
application request including the version-independent assembly 
5 name, not the version specific name, and passes it as a 
parameter or the like to the runtime version matching 
mechanism, where it is received at step 902. If an entry for 
the name is in the activation context at step 904, the runtime 
version matching mechanism returns the version specific 

10 information (e.g., including the path and filename of the 
correct version) based on the manifest at step 906. If an 
entry for the name is not found in the activation context at 
step 904, at step 908 the runtime version matching mechanism 
returns a not found status, (or alternatively can determine and 

15 return the path and filename of the default version) . At step 
910, the activation API loads the appropriate version, and 
returns a loading status or the like. The operating system 
also maps any uses of this named object to the appropriate 
version to allow for multiple versions of the code module to 

20 run simultaneously without interfering with each other, 

whereby, for example COM object data is isolated per object. 
At this time, the correct version as specified in the manifests 
is loaded, even though the application's executable code did 
not specify any version. Indeed, by providing an associated 

25 manifest that can be stored into the application's directory, 
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an already existing application (e.g., written and installed 
before the present invention) can benefit from the present 
invention. In this manner, the application runs with a 
controlled set of assemblies bound thereto. 

Turning to the second alternative mode, FIGS. 10-11 
represent example steps that may be taken, such as dynamically 
during runtime, to determine which version of an assembly to 
bind. To this end, the binding mechanism 305 of FIG. 3B (e.g., 
of the operating system) may check for an application manifest 
in same file system directory as the calling executable, as 
represented in FIG. 10 by step 1000. If an application 
manifest does not exist, the binding mechanism 305 handles its 
absence in another manner, (step 1002), e.g., the operating 
system essentially will give the application default versions 
during runtime, such as by first loading any requested 
component or assembly from the application's own directory when 
one is present, and otherwise using the default assemblies from 
the assembly cache. 

When step 1000 determines that an application manifest 
exists, it is interpreted as represented by step 1004. Then, 
in this second mode, step 1006 tests whether an application 
configuration exists for this application, e.g., in the 
application directory. If not, step 1006 branches ahead to 
FIG. 11 to test for whether a publisher configuration applies, 
as described below. If an application configuration is found 
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at step 1006, step 1006 branches to step 1008 wherein the 
application configuration is interpreted to determine whether 
there is an instruction therein for replacing the assembly 
version that is currently under evaluation. If such a relevant 
replacement instruction is found, step 1008 branches to step 
1010 wherein the current assembly binding information is 
replaced. 

FIG. 11 represents the next steps in this second 
alternative mode, wherein if an application configuration 
exists, step 1100 tests whether it includes data specifying the 
safe mode of configuration resolution. If the safe mode is 
specified, step 1100 avoids the publisher configuration 
evaluation by branching ahead to test for administrator 
configuration, described below with respect to steps 1108, 1110 
and 1112. Note that although not specifically shown in FIGS. 
10 and 11, step 1006 (FIG. 10) can branch to step 1102 (FIG. 
11) when no application policy exists, unless something other 
than the application configuration (e.g., an administrative 
setting) is capable of setting the safe mode. 

If the safe mode is not specified at step 1100, step 1100 
branches to step 1102 to test for a publisher configuration. 
If a publisher configuration is found at step 1102, step 1102 
branches to step 1104 wherein the publisher configuration is 
interpreted to determine whether there is an instruction 
therein for replacing the assembly version that is currently 
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under evaluation, either as originally specified in the 
manifest or as replaced by application configuration (as 
described above with respect to step 1010) . If a replacement 
instruction is found at step 1104, step 1104 branches to step 
5 1105 wherein the replacement is made, otherwise step 1104 
effectively bypasses step 1105. 

The process continues to step 1108, which represents the 
start of the second mode's third phase of the configuration 
resolution process, wherein a test is performed to determine 

10 whether the system has an administrator configuration, e.g., in 
the system directory. If not, step 1114 is executed, as 
described below. If so, step 1108 branches to step 1110 
wherein the administrator configuration is interpreted to 
determine whether there is an instruction therein for replacing 

15 the current assembly version with another version. If a 

replacement instruction is found, step 1110 branches to step 
1112 wherein the replacement is made, otherwise there is 
nothing to replace and step 1110 bypasses any replacement. In 
any event, the process continues to step 1114. 

20 At this time, the appropriate assembly version is known, 

as specified in the manifest and as altered via any 
configuration instructions, as described above. Step 1114 
enumerates any dependencies in the assembly manifest that 
corresponds to this appropriate assembly for handling in a 

25 similar manner. These and other identified assemblies may be 
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handled in a similar manner so that the correct versions as 
specified in the configurations are bound to the application. 

As can be seen from the foregoing detailed description, 
there is provided a method, system and infrastructure to 
version globally named objects in the system. Application 
authors may create safe, isolated applications by simply 
creating a declarative manifest that describes dependencies on 
these shared objects, without needing to be concerned with 
coding the application to adjust to the version of the assembly 
being used. By the present invention, assemblies can be safely 
shared and applications can be more completely isolated. 

While the invention is susceptible to various 
modifications and alternative constructions, certain 
illustrated embodiments thereof are shown in the drawings and 
have been described above in detail. It should be understood, 
however, that there is no intention to limit the invention to 
the specific form or forms disclosed, but on the contrary, the 
intention is to cover all modifications, alternative 
constructions, and equivalents falling within the spirit and 
scope of the invention. 
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